Enroll

What it does

Enroll is a command-line tool that reverse-engineers existing servers into Ansible configuration management. It captures host state—packages, services, configuration files, runtime state—into a structured bundle, then renders that bundle as Ansible roles, playbooks, templates, and host variables. The pipeline is: harvest (collect facts and files), validate (check schema and consistency), manifest (generate Ansible output), and optionally diff (compare two harvests for drift detection).

Enroll avoids capturing secrets by default (private keys, tokens, oversized files, binaries) unless the --dangerous flag is used. It supports remote SSH harvesting, multi-site mode with FQDN-based inventory, and SOPS-encrypted bundles for at-rest security.

Who it is for

Enroll is for DevOps engineers, system administrators, and teams managing existing server fleets who want to adopt or improve Ansible-based configuration management. It is especially useful for:

• Migrating manually configured servers to infrastructure-as-code.
• Auditing and documenting server state.
• Detecting configuration drift over time.
• Generating Ansible playbooks from a known-good baseline.

The tool assumes familiarity with Ansible and command-line operations.

Why it matters

Many organizations have servers that were configured manually or through ad-hoc scripts, making them hard to reproduce, audit, or manage at scale. Enroll provides a safe, repeatable way to capture that state and convert it into Ansible code, reducing the risk of misconfiguration and enabling version-controlled infrastructure. Its default secret avoidance and validation steps help prevent accidental exposure of sensitive data. By supporting drift detection via diff, it also helps teams monitor changes over time.

Launch signal

Enroll was launched on Hacker News as a Show HN post titled "Enroll, a tool to reverse-engineer servers into Ansible config mgmt" on enroll.sh. The website provides full documentation and a quickstart guide. The tool is open-source (license not specified on the page) and available for immediate use.

Brand and naming

The name "Enroll" suggests bringing servers into a managed state, like enrolling them into a configuration management system. It is short, memorable, and domain-appropriate. The tagline "reverse-engineer servers into Ansible configuration management" clearly communicates the core value proposition. The brand positions itself as a safe, pipeline-oriented tool with a focus on security and validation.